Close
  • Latest News
  • Artificial Intelligence
  • Big Data and Analytics
  • Cloud
  • Networking
  • Cybersecurity
  • Applications
  • IT Management
  • Storage
  • Sponsored
  • Mobile
  • Small Business
  • Development
  • Database
  • Servers
  • Android
  • Apple
  • Innovation
  • Blogs
  • PC Hardware
  • Reviews
  • Search Engines
  • Virtualization
Read Down
Sign in
Close
Welcome!Log into your account
Forgot your password?
Read Down
Password recovery
Recover your password
Close
Search
Logo
Logo
  • Latest News
  • Artificial Intelligence
  • Big Data and Analytics
  • Cloud
  • Networking
  • Cybersecurity
  • Applications
  • IT Management
  • Storage
  • Sponsored
  • Mobile
  • Small Business
  • Development
  • Database
  • Servers
  • Android
  • Apple
  • Innovation
  • Blogs
  • PC Hardware
  • Reviews
  • Search Engines
  • Virtualization
More
    Home Applications
    • Applications
    • Cybersecurity
    • IT Management

    Getting Away Cheap After a Hack

    By
    Lisa Vaas
    -
    October 5, 2007
    Share
    Facebook
    Twitter
    Linkedin

      This is the Web site for the California Air Resources Board. Its nothing fancy to look at, but earlier this week it set itself apart for the simple reason that the possibility of its going offline didnt threaten to cut off the agency at the knees.

      The same couldnt be said for the many California state agencies that suffered intermittent and random outages of Web pages and e-mail systems following the inadvertent hijacking of the entire ca.gov domain, including all subdomains, on Oct. 2.

      California was caught off-guard when the federal GSA (General Services Administration), which manages all “.gov” domains, moved to knock the ca.gov domain offline in an attempt to deal with a hacker having rigged redirects to porn pages onto the site for a Marin County transportation agency.

      How the ARB got through the fiasco is as simple as it was effective—as well as cost effective.

      Specifically, the ARB has a back-up site hosted on a separate domain. Its a simple static page on a free domain, not a mirrored site, that can be preloaded with instructions for employees or visitors on how to communicate outside of their usual domain. Bill Welty, CIO for the agency—which focuses on air quality and air pollution reduction in California—chose not to specify that domain in an interview with eWEEK. “They probably dont need the attention,” he said. He did note, however, that there are multiple companies—such as Google, Lycos or Yahoo —that offer free site hosting.

      On Tuesday, the ARBs site was in fact threatened with outage. The agencys data center had called to inform the ARB about the problem. Federal officials were facing the need to force the domain name through the system again. It was a process that would take some 7.5 hours to complete.

      The ARB had only a few hours in which to react. Welty said that an all-hands bulletin went out via the e-mail that hadnt yet gone down, instructing all users that the temporary site was now active.

      Welty went into the backup site, posted notifications about the incident, and told users to watch the space as things developed. Fortunately for the agency, their systems came back up and within a few hours there was no measurable impact. If there had been an impact, however, the agency would still have been able to provide information to staff about the ca.gov site and could still have communicated throughout the incident.

      Welty said that California getting elbowed offline had a minimal impact on the ARBs operations and that it was in fact a good test of operation recovery plans that both his department and the California EPA have been working on for about a year.

      To view an eWEEK slide show on signs that your kid might be a hacker, click here.

      “The idea is that governments might look to the Internet [for] places to go when there are these kinds of [circumstances involving outages or disasters] so youre not totally reliant on your own domain to keep things going,” he said.

      The technique, which is of course not limited to government organizations, is to avoid keeping all your eggs in one domain basket. “Then if you encounter something like this thats rather sudden, … the public, in the case of government, or your customers or employees, in the case of private companies, are not at a loss if your site goes down.”

      The simple solution has added appeal because it involves no intervention from IT staff, Welty said, who are likely scampering to fix an outage in such a situation. “You have almost immediate recovery because youre not relying on IT staff to turn the switch,” he said. “Thats basically what we did.”

      This solution doesnt involve a mirrored site, which would to a greater or a lesser degree duplicate live online processes. Rather, its a simple, static page that can be preloaded with, for example, instructions for employees on how to communicate outside of their usual domain. Welty said that the ARBs emergency off-domain page had a simple description of what happened and a request that visitors be patient and keep an eye on the space for updates.

      Welty particularly likes the cost. “What I like is its free,” he said. “Thats a big attraction, given that were an open-source shop. Its simple to use [and] to create. Its instantaneous. In a [Hurricane] Katrina situation, without having to rebuild the whole infrastructure, youd still be in business.”

      Welty has, in fact, pitched to hosting companies the idea of beefing up these types of pages to include encryption and other features that would make them more enterprise-worthy. But given that his agency only regards the back-up page as a quick fix, meant to be used from a few hours to a few days, its not really worth the bother. “Its only temporary, … so who cares? Its just a way to keep things running if your site takes a hit.”

      Check out eWEEK.coms Security Center for the latest security news, reviews and analysis. And for insights on security coverage around the Web, take a look at eWEEKs Security Watch blog.

      Lisa Vaas
      Lisa Vaas is News Editor/Operations for eWEEK.com and also serves as editor of the Database topic center. Since 1995, she has also been a Webcast news show anchorperson and a reporter covering the IT industry. She has focused on customer relationship management technology, IT salaries and careers, effects of the H1-B visa on the technology workforce, wireless technology, security, and, most recently, databases and the technologies that touch upon them. Her articles have appeared in eWEEK's print edition, on eWEEK.com, and in the startup IT magazine PC Connection. Prior to becoming a journalist, Vaas experienced an array of eye-opening careers, including driving a cab in Boston, photographing cranky babies in shopping malls, selling cameras, typography and computer training. She stopped a hair short of finishing an M.A. in English at the University of Massachusetts in Boston. She earned a B.S. in Communications from Emerson College. She runs two open-mic reading series in Boston and currently keeps bees in her home in Mashpee, Mass.
      Get the Free Newsletter!
      Subscribe to Daily Tech Insider for top news, trends & analysis
      This email address is invalid.
      Get the Free Newsletter!
      Subscribe to Daily Tech Insider for top news, trends & analysis
      This email address is invalid.

      MOST POPULAR ARTICLES

      Latest News

      Zeus Kerravala on Networking: Multicloud, 5G, and...

      James Maguire - December 16, 2022 0
      I spoke with Zeus Kerravala, industry analyst at ZK Research, about the rapid changes in enterprise networking, as tech advances and digital transformation prompt...
      Read more
      Applications

      Datadog President Amit Agarwal on Trends in...

      James Maguire - November 11, 2022 0
      I spoke with Amit Agarwal, President of Datadog, about infrastructure observability, from current trends to key challenges to the future of this rapidly growing...
      Read more
      IT Management

      Intuit’s Nhung Ho on AI for the...

      James Maguire - May 13, 2022 0
      I spoke with Nhung Ho, Vice President of AI at Intuit, about adoption of AI in the small and medium-sized business market, and how...
      Read more
      Applications

      Kyndryl’s Nicolas Sekkaki on Handling AI and...

      James Maguire - November 9, 2022 0
      I spoke with Nicolas Sekkaki, Group Practice Leader for Applications, Data and AI at Kyndryl, about how companies can boost both their AI and...
      Read more
      Cloud

      IGEL CEO Jed Ayres on Edge and...

      James Maguire - June 14, 2022 0
      I spoke with Jed Ayres, CEO of IGEL, about the endpoint sector, and an open source OS for the cloud; we also spoke about...
      Read more
      Logo

      eWeek has the latest technology news and analysis, buying guides, and product reviews for IT professionals and technology buyers. The site’s focus is on innovative solutions and covering in-depth technical content. eWeek stays on the cutting edge of technology news and IT trends through interviews and expert analysis. Gain insight from top innovators and thought leaders in the fields of IT, business, enterprise software, startups, and more.

      Facebook
      Linkedin
      RSS
      Twitter
      Youtube

      Advertisers

      Advertise with TechnologyAdvice on eWeek and our other IT-focused platforms.

      Advertise with Us

      Menu

      • About eWeek
      • Subscribe to our Newsletter
      • Latest News

      Our Brands

      • Privacy Policy
      • Terms
      • About
      • Contact
      • Advertise
      • Sitemap
      • California – Do Not Sell My Information

      Property of TechnologyAdvice.
      © 2022 TechnologyAdvice. All Rights Reserved

      Advertiser Disclosure: Some of the products that appear on this site are from companies from which TechnologyAdvice receives compensation. This compensation may impact how and where products appear on this site including, for example, the order in which they appear. TechnologyAdvice does not include all companies or all types of products available in the marketplace.

      ×